Senior Product Security Engineer: Secure AI-Driven SDLC

name; Tempe (AZ); Hybrid; USD 164,000 - 215,000; Full time

Benefits offered by this job

Unlimited vacation

Equity grants

Annual performance bonuses

Medical, dental, vision benefits

Job summary

Oscar Health is seeking a Senior Product Security Engineer to lead security across the software development life cycle, from design through deployment, with a focus on secure AI-driven workflows. You will architect, test, and deploy security systems, mentor engineers, and drive risk-based security improvements within a hybrid Tempe, AZ team.

The role requires 4+ years in software development and information security, deep SDLC security expertise, and hands-on ability to secure complex systems.

Qualifications

• 4+ years of combined software development and information security experience.
• Proven experience across all areas of the Secure Software Development Life Cycle.
• Hands-on experience with building or securing systems and features.

Responsibilities

• Drive vulnerability management across SAST/DAST to remediation tracking.
• Mentor junior engineers and streamline security workflows.
• Perform and guide code reviews of internal and third‑party software.
• Build risk assessment frameworks and deliver actionable mitigation plans.
• Partner with Engineering to remediate or migrate vulnerabilities and present security reviews.

Skills

Vulnerability management

Mentorship

Code reviews

Risk assessment

SDLC security

Security collaboration

Education

Bachelor's degree or four years of equivalent experience

Job description

Oscar Health is seeking a Senior Product Security Engineer to lead security across the software development life cycle, from design through deployment, with a focus on secure AI-driven workflows. You will architect, test, and deploy security systems, mentor engineers, and drive risk-based security improvements within a hybrid Tempe, AZ team.

The role requires 4+ years in software development and information security, deep SDLC security expertise, and hands-on ability to secure complex systems.